It always concerns me when big companies like this do weird things when it comes to passwords. Why do banks for instance have stupid password requirements; max lengths, disallowing certain characters, etc.
Surely if they are hashing the passwords in any form then it doesn't matter how long the password is or what characters it contains.
I understand perhaps the view is some people are not good at remembering passwords and so would forget a complicated password - but they are unlikely to use a long password or special characters if that's the case.
Surely if they are hashing the passwords in any form then it doesn't matter how long the password is or what characters it contains.
I understand perhaps the view is some people are not good at remembering passwords and so would forget a complicated password - but they are unlikely to use a long password or special characters if that's the case.
Or am I just missing something major here?